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ODP 4316-77 


Mr. Randy McIntosh 

Box 2400 - Elwell 
Bloomsburg State College 
Bloomsburg, Pa. 17815 


Dear Mr. MciIntosn: 


Thank you for your interest in CIA and our use of com- 
puters. Your assumption that CIA relies heavily on computers 
is correct. Naturally, security prevents us from discussing 
any particular application in detail, othe than routine 
administrative functions. However, we can state that the 
computer is an invaluable and highly powerful tool in collect- 
ing, analyzing, and producing intelligence. TI have enclosed 
some material which you may find useful in your study of 
computers and how they are used. 


The dangers associated with the use of computers have 
been the subject of numerous studies. For example, Senator 
Ribicoff reported to the U.S. Senate on a preliminary staff 
investigation concerning problems associated with computer 
applications in Federal programs. The investigation placed 
special focus on the capability of the executive branch to 
secure its computer systems against compromise, unauthorized 
access, and physical damage. His report is recorded in the 
Congressional Record of February 2, 1977, Vol. 123, No. 19. 
A guote from this report may give you the CIA view on computer 
security that you are looking for, i.e., page 8, paragraphs 
9 and 10: 


“Owing to their national security mission and the fact 
that this mission leads them to think in terms of 
securing an installation as well as attesting to the 
suitability of those who work there, the defense and 
intelligence communities have more experience in safe- 
guarding their own ADP systems. CIA spokesmen, for 
example, told the committee staff that they operate 
on the assumption that, first, a computer system can 
be penetrated, and, second, that an attempt will be 
made to penetrate it. therefore, the CIA spokesmen 
said, they try to design and manage their computer 
systems in a way that makes a single compromise of less 
impact. Defense Department spokesmen gave the committee 
staff similar information. 
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“CIA Director George Bush, in the statement he gave to 
the committee, said he did not think his organization 
should serve as a model for other Federal agencies in 
the computer security field. The committee staff 
agrees. But it is the staff's view that, in light of 
the potential for criminal compromise in the computer 
field, the fundamental principal defense and intel~ 
ligence gathering agencies adhere to--that every system 
ig able to be compromised; and that, therefore, an 
attempt will be made to achieve that compromise-~has 
value throughout the executive branch. It is a principal 
all Government ADP officials should keep in mind when 
they set out to design, purchase, operate and manage 
their own non-defense computer programs. “ 


A more comprehensive study of computer abuses is con- 
tained in "Problems Associated With Computer Technology in 
Federal Programs and Private Industry," prepared by the 
Committee on Government Operations, United States Senate, 
dated June 1976, U.S. Government Printing Office Publication 
No. 72-5380 (sale price $3.95). I have enclosed a copy of 
this document's Table of Contents for your reference. 


Another publication you might find of interest is “The 
Rules and Regulations for Access to the Systems of Records 
of the Central Intelligence Agency Subject to the Privacy 
Act of 1974.” These rules and a description of the CIA 
files they apply to are contained in pages 48050 through 
48074, and pages 48269 through 48271 of fhe Federal Register, 
Vol. 42, No. 184, Thursday, September 22, 1977. this publi- 
cation makes it clear that the CIA is subject to and is 
complying with the Federal law that protects U.S. citizens 
and resident aliens from a misuse of personal data by 
Federal agencies. 


Again, thank you for your interest in CIA. I hope the 
reply is helpful and wish you success in your studies. 


Sincerely, 


STATINTL 
Att: a/s 
Distribution: 
Orig - D/DCI/PAO, 1F-04, Hq. 
STATINTL 1 - ODP Registry 


2 - O/D/ODP 
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Q: 
AS executive Officer, ODP 
ROOM NO. BUILDING 
2D00 
REMARKS: 

Attached is a letter we have receive 
asking for information and pamphlets 
in the computer field. Would you 
please draft a reply for me and 
enclose the appropriate material if 

any is available. 


Thank you. 


STATINTL 


, 0/DCI/PAO 
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